Qualcomm Sm8650Q vulnerabilities, page 5
126 vulnerabilities
Known vulnerabilities in Qualcomm Sm8650Q, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2024-43051qualcomm, inc. · snapdragon +237 moreImproper Authorization in SPS-HLOSInformation disclosure while deriving keys for a session for any Widevine use case.EPSS0.11%HighCVE-2024-53027qualcomm, inc. · snapdragon +206 moreBuffer Copy Without Checking Size of Input in WLAN HostTransient DOS may occur while processing the country IE.EPSS0.30%HighCVE-2024-53011qualcomm, inc. · snapdragon +81 morePermissions, Privileges, and Access Controls in Video Analytics and ProcessingInformation disclosure may occur due to improper permission and access controls to Video Analytics engine.EPSS0.12%MediumCVE-2024-53015qualcomm, inc. · snapdragon +90 moreUse After Free in Computer VisionMemory corruption while processing IOCTL command to handle buffers associated with a session.EPSS0.09%HighCVE-2024-53026qualcomm, inc. · snapdragon +232 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.EPSS0.30%HighCVE-2024-53024qualcomm, inc. · snapdragon +161 moreNULL Pointer Dereference in DisplayMemory corruption in display driver while detaching a device.EPSS0.12%HighCVE-2024-53021qualcomm, inc. · snapdragon +223 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure may occur while processing goodbye RTCP packet from network.EPSS0.24%HighCVE-2024-53014qualcomm, inc. · snapdragon +244 moreImproper Validation of Array Index in AudioMemory corruption may occur while validating ports and channels in Audio driver.EPSS0.12%HighCVE-2024-53019qualcomm, inc. · snapdragon +79 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources.EPSS0.24%HighCVE-2024-53020qualcomm, inc. · snapdragon +232 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure may occur while decoding the RTP packet with invalid header extension from network.EPSS0.24%MediumCVE-2024-38426qualcomm, inc. · snapdragon +163 moreImproper Authentication in ModemWhile processing the authentication message in UE, improper authentication may lead to information disclosure.EPSS0.27%HighCVE-2024-45549qualcomm, inc. · snapdragon +158 moreExposure of Sensitive System Information to an Unauthorized Control Sphere in KERNELInformation disclosure while creating MQ channels.EPSS0.12%MediumCVE-2024-45551qualcomm, inc. · snapdragon +240 moreWeak Authentication in HLOSCryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.EPSS0.11%HighCVE-2024-49845qualcomm, inc. · snapdragon +144 moreImproper Input Validation in HLOSMemory corruption during the FRS UDS generation process.EPSS0.11%HighCVE-2024-49835qualcomm, inc. · snapdragon +207 moreOut-of-bounds Write in SPS ApplicationsMemory corruption while reading secure file.EPSS0.11%MediumCVE-2024-49848qualcomm, inc. · snapdragon +145 moreUse After Free in DSP ServiceMemory corruption while processing multiple IOCTL calls from HLOS to DSP.EPSS0.14%HighCVE-2024-49844qualcomm, inc. · snapdragon +179 moreImproper Input Validation in AutomotiveMemory corruption while triggering commands in the PlayReady Trusted application.EPSS0.11%HighCVE-2024-49847qualcomm, inc. · snapdragon +47 moreBuffer Over-read in Multi-Mode Call ProcessorTransient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE.EPSS0.26%HighCVE-2024-33058qualcomm, inc. · snapdragon +189 moreInsufficient Granularity of Access Control in CoreMemory corruption while assigning memory from the source DDR memory(HLOS) to ADSP.EPSS0.09%HighCVE-2026-21381qualcomm, inc. · snapdragon +102 moreBuffer Over-read in WLAN FirmwareTransient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection.EPSS0.15%